[ 28.613256][ T333] device veth1_macvtap entered promiscuous mode [ 28.624017][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 28.632429][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 28.683258][ T333] syz-executor.0 (333) used greatest stack depth: 20144 bytes left [ 29.153396][ T114] device bridge_slave_1 left promiscuous mode [ 29.159566][ T114] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.166803][ T114] device bridge_slave_0 left promiscuous mode [ 29.172732][ T114] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.180245][ T114] device veth1_macvtap left promiscuous mode [ 29.186116][ T114] device veth0_vlan left promiscuous mode Warning: Permanently added '10.128.10.11' (ECDSA) to the list of known hosts. 2023/03/23 15:57:19 ignoring optional flag "sandboxArg"="0" 2023/03/23 15:57:19 parsed 1 programs 2023/03/23 15:57:19 executed programs: 0 [ 45.870165][ T30] kauditd_printk_skb: 65 callbacks suppressed [ 45.870172][ T30] audit: type=1400 audit(1679587039.829:137): avc: denied { mounton } for pid=376 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 45.901460][ T30] audit: type=1400 audit(1679587039.839:138): avc: denied { mount } for pid=376 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 45.936930][ T380] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.944054][ T380] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.951312][ T380] device bridge_slave_0 entered promiscuous mode [ 45.958306][ T380] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.965684][ T380] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.972939][ T380] device bridge_slave_1 entered promiscuous mode [ 46.006610][ T380] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.013695][ T380] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.021208][ T380] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.028180][ T380] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.044889][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.052016][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.059394][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 46.067021][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 46.083554][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 46.092544][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 46.101710][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.108910][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.116740][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 46.124737][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.131871][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.139422][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 46.147417][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 46.155748][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 46.163764][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 46.171702][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 46.181122][ T380] device veth0_vlan entered promiscuous mode [ 46.190141][ T380] device veth1_macvtap entered promiscuous mode [ 46.197014][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 46.207013][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 46.218927][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 46.229164][ T30] audit: type=1400 audit(1679587040.189:139): avc: denied { mount } for pid=380 comm="syz-executor.0" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 46.257747][ T387] loop0: detected capacity change from 0 to 264192 [ 46.264825][ T30] audit: type=1400 audit(1679587040.229:140): avc: denied { mounton } for pid=386 comm="syz-executor.0" path="/root/syzkaller-testdir812447340/syzkaller.Mc7qUL/0/file0" dev="sda1" ino=1148 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 46.266851][ T387] erofs: (device loop0): mounted with root inode @ nid 36. [ 46.300024][ T387] erofs: (device loop0): z_erofs_pcluster_readmore: readmore error at page 3 @ nid 36 [ 46.309573][ T387] attempt to access beyond end of device [ 46.309573][ T387] loop0: rw=0, want=2201354232, limit=264192 [ 46.321141][ T387] attempt to access beyond end of device [ 46.321141][ T387] loop0: rw=0, want=20841953384, limit=264192 [ 46.332903][ T387] BUG: unable to handle page fault for address: fffff521000dce3b [ 46.340516][ T387] #PF: supervisor read access in kernel mode [ 46.346585][ T387] #PF: error_code(0x0000) - not-present page [ 46.352516][ T387] PGD 23ffef067 P4D 23ffef067 PUD 0 [ 46.357629][ T387] Oops: 0000 [#1] PREEMPT SMP KASAN [ 46.362661][ T387] CPU: 1 PID: 387 Comm: syz-executor.0 Not tainted 5.15.94-syzkaller #0 [ 46.371077][ T387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 [ 46.381150][ T387] RIP: 0010:z_erofs_decompress_queue+0x9fc/0x1730 [ 46.387399][ T387] Code: 00 e8 28 9f 93 ff 43 0f b6 04 27 84 c0 48 8b 5c 24 58 0f 85 75 02 00 00 41 8b 45 00 c1 f8 02 4c 8d 3c c3 4d 89 fd 49 c1 ed 03 <43> 80 7c 25 00 00 74 08 4c 89 ff e8 14 9d 93 ff 4d 8b 27 4d 85 e4 [ 46.406841][ T387] RSP: 0018:ffffc900006e70a0 EFLAGS: 00010a02 [ 46.412901][ T387] RAX: 00000000ffffffff RBX: ffffc900006e71e0 RCX: ffffffff820789e8 [ 46.420711][ T387] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffffea000485f5e8 [ 46.428694][ T387] RBP: ffffc900006e7610 R08: dffffc0000000000 R09: fffff9400090bebe [ 46.436769][ T387] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 46.444671][ T387] R13: 1ffff921000dce3b R14: ffffea000485f5c0 R15: ffffc908006e71d8 [ 46.452475][ T387] FS: 00007fea24dd4700(0000) GS:ffff8881f7300000(0000) knlGS:0000000000000000 [ 46.461244][ T387] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 46.468284][ T387] CR2: fffff521000dce3b CR3: 0000000122957000 CR4: 00000000003506a0 [ 46.476086][ T387] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 46.484007][ T387] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 46.492052][ T387] Call Trace: [ 46.495525][ T387] [ 46.498300][ T387] ? bio_endio+0x502/0x520 [ 46.502645][ T387] ? z_erofs_pagevec_ctor_init+0x530/0x530 [ 46.508571][ T387] ? blk_try_enter_queue+0xec/0x210 [ 46.513707][ T387] ? _raw_spin_unlock_irq+0x4e/0x70 [ 46.518732][ T387] ? wait_for_common_io+0x23e/0x2e0 [ 46.523766][ T387] ? complete+0x67/0xb0 [ 46.527759][ T387] ? wait_for_completion_io+0x20/0x20 [ 46.532972][ T387] ? z_erofs_decompress_kickoff+0xe9/0x250 [ 46.538806][ T387] ? z_erofs_decompressqueue_endio+0x490/0x490 [ 46.544952][ T387] ? submit_bio_noacct+0xab0/0xab0 [ 46.549892][ T387] ? bio_add_page+0x1f9/0x410 [ 46.554402][ T387] z_erofs_runqueue+0x101b/0x10e0 [ 46.559358][ T387] ? z_erofs_do_read_page+0x1c00/0x1c00 [ 46.564995][ T387] ? mutex_unlock+0xa9/0x1d0 [ 46.569428][ T387] ? __mutex_lock_slowpath+0x10/0x10 [ 46.574651][ T387] z_erofs_readpage+0x2cd/0x4d0 [ 46.579606][ T387] ? z_erofs_rcu_callback+0xe0/0xe0 [ 46.584977][ T387] ? add_to_page_cache_lru+0x19c/0x230 [ 46.590375][ T387] ? add_to_page_cache_locked+0x10/0x10 [ 46.596005][ T387] do_read_cache_page+0x440/0x680 [ 46.600858][ T387] read_cache_page+0x49/0x70 [ 46.605284][ T387] erofs_namei+0x152/0xea0 [ 46.609711][ T387] erofs_lookup+0x11c/0x360 [ 46.614053][ T387] ? _raw_spin_trylock_bh+0x190/0x190 [ 46.619262][ T387] ? erofs_namei+0xea0/0xea0 [ 46.623775][ T387] ? _raw_spin_unlock+0x4d/0x70 [ 46.628585][ T387] ? d_alloc+0x181/0x1c0 [ 46.632769][ T387] __lookup_hash+0x194/0x1f0 [ 46.637170][ T387] filename_create+0x24e/0x490 [ 46.641775][ T387] ? kern_path_create+0x150/0x150 [ 46.646717][ T387] do_mknodat+0x159/0x4a0 [ 46.651064][ T387] ? strncpy_from_user+0x74/0x1c0 [ 46.656036][ T387] ? may_open+0x2b0/0x2b0 [ 46.660298][ T387] ? getname_flags+0xe7/0x440 [ 46.664805][ T387] __x64_sys_mknodat+0xa4/0xc0 [ 46.669641][ T387] do_syscall_64+0x3d/0xb0 [ 46.674123][ T387] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 46.679797][ T387] RIP: 0033:0x7fea252605a9 [ 46.684101][ T387] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 46.703796][ T387] RSP: 002b:00007fea24dd4168 EFLAGS: 00000246 ORIG_RAX: 0000000000000103 [ 46.712123][ T387] RAX: ffffffffffffffda RBX: 00007fea25380f80 RCX: 00007fea252605a9 [ 46.720041][ T387] RDX: 0000000000000004 RSI: 0000000020000080 RDI: 0000000000000005 [ 46.727851][ T387] RBP: 00007fea252bb7b0 R08: 0000000000000000 R09: 0000000000000000 [ 46.735662][ T387] R10: 0000000000000700 R11: 0000000000000246 R12: 0000000000000000 [ 46.743485][ T387] R13: 00007fff99282e0f R14: 00007fea24dd4300 R15: 0000000000022000 [ 46.751408][ T387] [ 46.754345][ T387] Modules linked in: [ 46.758073][ T387] CR2: fffff521000dce3b [ 46.762069][ T387] ---[ end trace 1484fd287db226a9 ]--- [ 46.767445][ T387] RIP: 0010:z_erofs_decompress_queue+0x9fc/0x1730 [ 46.773785][ T387] Code: 00 e8 28 9f 93 ff 43 0f b6 04 27 84 c0 48 8b 5c 24 58 0f 85 75 02 00 00 41 8b 45 00 c1 f8 02 4c 8d 3c c3 4d 89 fd 49 c1 ed 03 <43> 80 7c 25 00 00 74 08 4c 89 ff e8 14 9d 93 ff 4d 8b 27 4d 85 e4 [ 46.793492][ T387] RSP: 0018:ffffc900006e70a0 EFLAGS: 00010a02 [ 46.799578][ T387] RAX: 00000000ffffffff RBX: ffffc900006e71e0 RCX: ffffffff820789e8 [ 46.807571][ T387] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffffea000485f5e8 [ 46.815374][ T387] RBP: ffffc900006e7610 R08: dffffc0000000000 R09: fffff9400090bebe [ 46.823280][ T387] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 46.831171][ T387] R13: 1ffff921000dce3b R14: ffffea000485f5c0 R15: ffffc908006e71d8 [ 46.839068][ T387] FS: 00007fea24dd4700(0000) GS:ffff8881f7300000(0000) knlGS:0000000000000000 [ 46.848195][ T387] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 46.854801][ T387] CR2: fffff521000dce3b CR3: 0000000122957000 CR4: 00000000003506a0 [ 46.862807][ T387] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 46.870783][ T387] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 46.878778][ T387] Kernel panic - not syncing: Fatal exception [ 46.884816][ T387] Kernel Offset: disabled [ 46.889107][ T387] Rebooting in 86400 seconds..